Media
CVE-2023-3348
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.476
Restablecer filtros
Alta
CVE-2023-37478
pnpm incorrectly parses tar archives relative to specification
Alta
ghsa-wxf3-4fvj-vqqx
Unsafe plugins can be installed via pack import by tenant admins
Media
CVE-2023-37259
matrix-react-sdk vulnerable to XSS in Export Chat feature
Alta
CVE-2022-24441
snyk Code Injection vulnerability
Alta
CVE-2023-31999
@fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state
Crítica
CVE-2023-36475
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
Baja
ghsa-68jh-rf6x-836f
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
Crítica
CVE-2023-3224
nuxt Code Injection vulnerability
Media
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
Alta
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Media
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
Alta
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Media
CVE-2023-32689
Phishing attack vulnerability by uploading malicious HTML file
Media
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Media
CVE-2023-32695
Insufficient validation when decoding a Socket.IO packet
Media
CVE-2023-32688
Invalid push request payload crashes Parse Server
Crítica
CVE-2023-2583
jsreport vulnerable to code injection
Media
CVE-2023-31125
engine.io Uncaught Exception vulnerability
Alta
CVE-2023-29019
Session fixation in fastify-passport
Media
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Media
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Crítica
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
Alta
Explotada en ataques
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.